$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/42997fc6-5a5e-380e-bfbe-9a6935c6c362.roa File: 42997fc6-5a5e-380e-bfbe-9a6935c6c362.roa (raw, json) Hash identifier: Ctb0zOyeneknzROppzySrlkdEJPvB+edcphYtiqnYnc= Subject key identifier: F7:45:4D:8A:E0:83:42:FD:F9:49:32:BB:82:03:AE:15:AB:1D:20:09 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285847E62B36C1D75EF9D94AB54C00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/42997fc6-5a5e-380e-bfbe-9a6935c6c362.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 15169 IP address blocks: 173.194.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2b:36:c1:d7:5e:f9:d9:4a:b5:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=b036b19b-7257-495a-8d1a-e71f464c20c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3d:e3:b1:8e:f4:e6:07:53:fa:33:97:cf:61: 7f:b4:cb:6e:76:9a:21:dc:66:5c:07:6a:c9:de:91: bb:c8:01:02:9a:33:4b:b7:57:26:af:4e:df:55:85: a8:b3:80:af:2e:c6:bd:b8:76:47:28:69:0d:af:05: f1:53:f3:b7:38:98:e3:86:c6:61:c3:94:83:d5:b2: e9:ab:a4:11:ae:98:23:87:68:0d:22:8b:73:48:7f: 6c:ae:90:25:30:15:d6:c9:52:80:d7:cb:a3:11:9c: d0:ca:74:1a:78:de:46:4d:b8:4c:2f:30:09:6d:9e: 73:9b:29:71:69:09:c5:0e:cc:c4:fc:e6:7d:82:39: 4e:a5:3c:19:9d:d9:87:4a:06:34:5a:40:ba:af:a0: b2:85:14:c6:7a:14:5f:f7:f2:50:53:c9:90:37:3d: 79:24:fc:d8:0f:01:a4:13:56:65:9a:bb:ad:ee:5b: c1:95:49:ed:29:b7:c1:5a:d6:a2:21:27:bf:8c:3a: 61:06:45:31:0f:95:fe:1e:83:a7:3c:9b:df:7f:07: 89:e2:e4:e1:f7:0b:10:fd:b3:b9:9d:d3:89:16:01: ea:a0:07:46:c0:29:b9:19:b4:b3:c2:24:e2:bc:20: e8:df:58:f7:be:3d:f3:df:2a:4e:5c:9c:c4:f8:e7: 8b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:45:4D:8A:E0:83:42:FD:F9:49:32:BB:82:03:AE:15:AB:1D:20:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/42997fc6-5a5e-380e-bfbe-9a6935c6c362.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 173.194.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:85:7c:66:76:43:38:3d:92:f2:7c:76:3f:8b:8c:34:b8:0f: fb:ef:1e:09:d1:6b:5f:d2:05:a0:88:20:49:3e:40:08:26:7b: d8:52:ca:01:e2:60:73:23:09:16:58:2d:d5:e9:d3:95:77:df: 09:21:21:74:01:e4:ac:0d:c0:7c:86:d8:a7:77:4c:26:a1:ff: ee:3f:c8:85:fe:26:45:72:31:ec:47:47:65:b9:8e:77:81:52: 23:7b:1a:25:73:9e:06:fd:fe:5a:e0:13:f4:b1:a7:b6:1e:ff: 75:8d:73:53:dd:5c:2e:94:ab:92:f2:81:d8:68:ea:75:ab:e2: b3:19:06:2d:26:0d:88:6a:00:ff:c8:bf:c4:5c:78:a1:e2:e7: cd:d5:43:b3:1d:07:81:90:be:cc:71:c3:4a:03:e3:db:10:dd: 65:6c:c1:c8:94:52:67:51:b0:3e:ee:d6:70:67:cf:0c:cf:0c: 3a:92:c3:45:cb:43:56:d6:db:e9:e4:00:1f:db:a5:d5:6a:bc: dd:fa:ec:9e:8f:8e:e4:d2:79:6b:b5:4e:d3:37:d9:91:69:30: 56:31:e9:ac:ad:ba:84:69:e8:0b:b0:02:6e:56:49:f0:18:89: 63:7c:e4:fe:9b:6b:da:bc:d2:01:55:b4:84:8f:25:c3:08:92: 31:d3:9a:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKzbB11752Uq1TAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk YjAzNmIxOWItNzI1Ny00OTVhLThkMWEtZTcxZjQ2NGMyMGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj3jsY705gdT+jOXz2F/tMtudpoh3GZcB2rJ 3pG7yAECmjNLt1cmr07fVYWos4CvLsa9uHZHKGkNrwXxU/O3OJjjhsZhw5SD1bLp q6QRrpgjh2gNIotzSH9srpAlMBXWyVKA18ujEZzQynQaeN5GTbhMLzAJbZ5zmylx aQnFDszE/OZ9gjlOpTwZndmHSgY0WkC6r6CyhRTGehRf9/JQU8mQNz15JPzYDwGk E1Zlmrut7lvBlUntKbfBWtaiISe/jDphBkUxD5X+HoOnPJvffweJ4uTh9wsQ/bO5 ndOJFgHqoAdGwCm5GbSzwiTivCDo31j3vj3z3ypOXJzE+OeLJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdFTYrgg0L9+Ukyu4IDrhWrHSAJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNDI5OTdmYzYtNWE1ZS0z ODBlLWJmYmUtOWE2OTM1YzZjMzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcIpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWFfGZ2Qzg9kvJ8dj+LjDS4D/vvHgnRa1/SBaCIIEk+QAgme9hSygHi YHMjCRZYLdXp05V33wkhIXQB5KwNwHyG2Kd3TCah/+4/yIX+JkVyMexHR2W5jneB UiN7GiVzngb9/lrgE/Sxp7Ye/3WNc1PdXC6Uq5Lygdho6nWr4rMZBi0mDYhqAP/I v8RceKHi583VQ7MdB4GQvsxxw0oD49sQ3WVswciUUmdRsD7u1nBnzwzPDDqSw0XL Q1bW2+nkAB/bpdVqvN367J6PjuTSeWu1TtM32ZFpMFYx6aytuoRp6AuwAm5WSfAY iWN85P6ba9q80gFVtISPJcMIkjHTmsE= -----END CERTIFICATE-----Generated at Fri Nov 22 00:25:15 2024 by rpki-client on console-fra.rpki-client.org